The business wants to use this software but I am getting pushed back by Info Security because it is getting flagged by Virus Total
[url]
https://www.virustotal.com/en/file/d449434afd56f22272138a46b0953a7c900d258323f6179acafb459d30b0c8c2/analysis/1489181864/[/url]
I've tried to tell them before that typically just one positive isn't a good indicator that a file is infected but they don't seem to want to hear that. I scanned the older version and it also gets flagged by Baidu as well as the most recent stable from the direct link site:
[url]
https://www.virustotal.com/en/file/8a43ea5767be343fd160abf44eb3a28bd158aeb2a667076a9b107151b30a477f/analysis/1489089699/[/url]
[url]
https://www.virustotal.com/en/file/e355a164ba6bec583401126c54b12a2fefba2851b264f08a09b1374fc8c987c4/analysis/1489181930/[/url]
I've scanned the actual source files in the zip and they come clean. If anyone could offer anymore detailed analysis that would be helpful. I dug a bit more and Baidu is a chinese AV company so I have no idea how reliable they are and I've had issues with Zillya before as well. From what I could find Baidu seems to have some strange heuristics that flag some normal things like bitcoin wallets and such.
I was able to verify the PGP keys with samuli's key so I have that to pass along to them as well.
Anyway, again if anyone could offer any other info or assurance that would be helpful
